This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/nQXtvYrXtPyWo8wdiVt03n7okKI.roa File: nQXtvYrXtPyWo8wdiVt03n7okKI.roa (raw, json) Hash identifier: +Td1mWZIUIswdEduLgPTGcO3qf/mkOmktChvzCE5tck= Subject key identifier: 9D:05:ED:BD:8A:D7:B4:FC:96:A3:CC:1D:89:5B:74:DE:7E:E8:90:A2 Certificate issuer: /CN=39805a05b8d9f0dfc43834c664d624715439f0d5 Certificate serial: 019B7910FC53A991F259798A9A457E6F77F9 Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/nQXtvYrXtPyWo8wdiVt03n7okKI.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49220 IP address blocks: 185.37.136.0/22 maxlen: 22 188.92.128.0/21 maxlen: 21 2001:16f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fc:53:a9:91:f2:59:79:8a:9a:45:7e:6f:77:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d05edbd8ad7b4fc96a3cc1d895b74de7ee890a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:cb:cc:41:81:3a:ab:aa:06:28:9b:85:8d: 49:b2:15:97:53:b8:77:44:d6:e6:cf:3e:4d:0a:84: 43:1c:d6:cd:95:dd:46:f4:b0:cc:7a:dd:d8:b2:b9: 78:80:cc:61:45:3e:da:f4:1d:b8:3a:4e:c2:7d:25: 27:b8:74:64:76:78:e6:ee:0b:3f:7b:e0:ec:b6:e1: 08:ca:43:2d:6a:ba:4b:81:4d:ed:d0:a1:bb:47:49: 1f:65:52:ca:00:d7:58:69:0d:43:95:40:c4:16:9a: 65:b3:8e:c4:0c:d3:4b:85:6d:14:9d:8f:d5:34:56: 7a:08:eb:fb:7e:42:66:f3:6f:ad:43:3d:d9:86:43: b8:18:b3:a3:21:a2:1b:f0:8d:4a:cd:24:c1:9a:eb: ed:ef:00:8a:b2:11:c0:d9:6e:d8:aa:a8:6c:68:20: f6:99:50:1a:14:65:91:5f:91:67:5e:dc:46:6b:83: f4:36:63:65:be:af:46:4a:dc:33:c7:9a:c3:70:37: 52:e2:51:de:03:72:dc:71:10:17:ba:2a:d7:60:53: 6a:60:61:05:97:33:14:1c:e7:3c:52:66:01:c0:9c: ae:4a:12:ee:0b:75:57:aa:22:3c:7d:c5:a9:30:be: 45:77:94:89:6d:19:23:17:13:72:c0:e9:91:c0:81: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:05:ED:BD:8A:D7:B4:FC:96:A3:CC:1D:89:5B:74:DE:7E:E8:90:A2 X509v3 Authority Key Identifier: keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/nQXtvYrXtPyWo8wdiVt03n7okKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.136.0/22 188.92.128.0/21 IPv6: 2001:16f0::/32 Signature Algorithm: sha256WithRSAEncryption 91:e1:fe:0a:8e:b6:97:09:b1:c9:4e:6e:8e:bd:8d:7f:bb:72: e8:dc:2e:c2:8e:fd:55:30:36:72:c6:5b:6d:d5:ea:7b:18:5b: c7:4b:fd:20:3a:0b:3e:ab:69:55:06:7b:57:74:77:1c:10:3c: 62:4f:37:30:1b:18:85:17:f6:1f:55:6a:45:47:4d:b8:26:0f: 07:1e:4c:44:e2:ad:af:35:d5:29:6f:6d:f4:b8:39:eb:99:fa: d9:04:11:fd:98:7a:ad:6b:48:e6:8d:7c:9c:d3:b8:b8:23:95: f6:25:b0:79:48:a9:a0:c7:56:65:8d:be:de:9d:c2:b7:bc:e6: 28:f0:ff:b0:6d:49:c7:f8:50:83:16:36:31:06:8d:40:23:42: 77:94:96:29:75:f3:ad:8e:cf:0e:8a:b2:76:b0:6a:7f:d6:41: f1:b3:97:81:0a:2f:bb:e5:88:f8:d7:03:4e:7f:00:4e:43:43: 6e:3f:b5:62:a6:d3:c0:df:b0:ce:42:24:84:1d:9e:68:11:0a: 41:95:01:b0:17:a3:d8:18:e6:93:8a:7b:38:b8:aa:2f:ff:a6: d0:92:5c:c4:97:39:e5:cd:ae:1d:9e:fc:27:47:5f:8f:6e:af: 14:8c:e4:70:b9:79:24:04:5b:bc:23:13:96:48:2e:dd:fb:66: ce:aa:05:fa -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EPxTqZHyWXmKmkV+b3f5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ODA1YTA1YjhkOWYwZGZjNDM4MzRjNjY0ZDYyNDcxNTQz OWYwZDUwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDA1ZWRiZDhhZDdiNGZjOTZhM2NjMWQ4OTViNzRkZTdlZTg5MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOvLzEGBOquqBiibhY1JshWXU7h3 RNbmzz5NCoRDHNbNld1G9LDMet3Ysrl4gMxhRT7a9B24Ok7CfSUnuHRkdnjm7gs/ e+DstuEIykMtarpLgU3t0KG7R0kfZVLKANdYaQ1DlUDEFppls47EDNNLhW0UnY/V NFZ6COv7fkJm82+tQz3ZhkO4GLOjIaIb8I1KzSTBmuvt7wCKshHA2W7YqqhsaCD2 mVAaFGWRX5FnXtxGa4P0NmNlvq9GStwzx5rDcDdS4lHeA3LccRAXuirXYFNqYGEF lzMUHOc8UmYBwJyuShLuC3VXqiI8fcWpML5Fd5SJbRkjFxNywOmRwIHUzwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ0F7b2K17T8lqPMHYlbdN5+6JCiMB8GA1UdIwQY MBaAFDmAWgW42fDfxDg0xmTWJHFUOfDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1lCYUJialo4Tl9FT0RUR1pOWWtjVlE1OE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMDY5NDItYWZjOC00MzM2LTk3ZWUt YWVlNjk2ZjgzOTAzLzEvblFYdHZZclh0UHlXbzh3ZGlWdDAzbjdva0tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMDY5NDItYWZjOC00MzM2LTk3ZWUtYWVlNjk2ZjgzOTAz LzEvT1lCYUJialo4Tl9FT0RUR1pOWWtjVlE1OE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSWIAwQD vFyAMA0EAgACMAcDBQAgARbwMA0GCSqGSIb3DQEBCwUAA4IBAQCR4f4KjraXCbHJ Tm6OvY1/u3Lo3C7Cjv1VMDZyxltt1ep7GFvHS/0gOgs+q2lVBntXdHccEDxiTzcw GxiFF/YfVWpFR024Jg8HHkxE4q2vNdUpb230uDnrmfrZBBH9mHqta0jmjXyc07i4 I5X2JbB5SKmgx1Zljb7encK3vOYo8P+wbUnH+FCDFjYxBo1AI0J3lJYpdfOtjs8O irJ2sGp/1kHxs5eBCi+75Yj41wNOfwBOQ0NuP7ViptPA37DOQiSEHZ5oEQpBlQGw F6PYGOaTins4uKov/6bQklzElznlza4dnvwnR1+Pbq8UjORwuXkkBFu8IxOWSC7d +2bOqgX6 -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:03 2026 by rpki-client